Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa
File:                     87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa (raw, json)
Hash identifier:          4uTeE/iTtDgfmzrVGq9uc0sBneHz1tX2QzS7VycPi1Q=
Subject key identifier:   DF:C1:D0:F5:B7:6B:AE:5B:01:04:CC:96:CA:95:EB:58:B5:0A:85:E1
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540BBE1A7086986CA635267C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa
Signing time:             Mon 18 Mar 2024 22:16:22 +0000
ROA not before:           Mon 18 Mar 2024 22:16:22 +0000
ROA not after:            Sun 16 Jun 2024 22:16:22 +0000
asID:                     36040
IP address blocks:        136.22.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:e1:a7:08:69:86:ca:63:52:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:16:22 2024 GMT
            Not After : Jun 16 22:16:22 2024 GMT
        Subject: CN=f4c82a1b-7f73-490c-b0e4-0d06422398e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:09:f8:50:36:c7:97:b4:8d:36:c5:18:7e:
                    c8:b3:26:c9:fd:5f:40:26:64:a1:17:bb:0a:4a:e9:
                    ef:17:a3:57:07:91:b7:c6:83:e7:85:49:50:6c:04:
                    a6:b2:1f:e0:6b:3b:6c:eb:c1:8a:6d:68:00:af:bd:
                    60:8f:42:e0:c6:b3:23:bb:dd:9f:e9:0d:8a:d2:51:
                    5f:06:6b:6c:60:18:0a:f6:49:87:15:76:54:a5:f7:
                    64:17:29:60:91:e4:db:b2:a5:cb:a3:0c:4e:14:54:
                    65:55:f4:f2:e2:26:5c:e0:8f:83:c3:2d:6a:d5:90:
                    28:af:a9:9f:9a:de:00:f9:8e:55:b1:c5:4e:2b:b8:
                    1f:7a:15:d2:69:ae:a9:dc:4e:66:a0:91:0e:1b:f9:
                    75:43:df:cb:f7:11:13:24:3b:56:c9:92:2b:de:ec:
                    b1:9e:a1:43:93:7a:72:26:5e:fd:d7:04:29:af:f2:
                    60:44:58:fc:92:6e:47:45:ef:c5:07:84:32:de:5d:
                    e3:7a:c4:6a:06:dd:a5:be:fc:9d:a3:cb:b2:d7:db:
                    a0:f5:07:f0:33:8e:b4:31:12:f9:b0:75:93:36:9c:
                    09:fb:28:f8:cb:97:dd:77:97:09:2b:76:81:33:1a:
                    6e:b3:50:b8:40:af:5b:42:d8:c7:71:88:40:cc:80:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C1:D0:F5:B7:6B:AE:5B:01:04:CC:96:CA:95:EB:58:B5:0A:85:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:73:f0:f2:0b:91:eb:6b:b6:41:15:ad:fd:dd:57:69:07:
         3e:6d:f1:67:78:8a:c1:b3:0d:db:31:d3:ee:e2:bd:83:ec:b7:
         71:6b:fb:d8:50:35:16:23:a0:ea:47:62:bb:2b:3e:da:31:83:
         11:24:b9:1e:2b:f1:7b:f8:14:c3:c8:43:da:e5:68:10:31:e4:
         c3:57:6f:26:7c:6c:3a:53:e2:9b:9f:7f:b0:89:ae:a1:cf:ef:
         a2:c4:1f:e8:86:2f:e7:d1:9a:3a:2f:c9:34:6a:be:e9:b6:42:
         d6:77:7a:2f:48:3c:85:71:a7:06:fe:10:9c:90:b6:b0:33:ee:
         a4:c9:61:dd:6e:42:af:9a:56:a2:dc:4f:58:28:e4:17:fd:65:
         85:af:22:3c:08:b1:6b:57:25:0c:97:76:30:6e:a7:4b:62:57:
         be:b8:e8:12:2f:78:4b:b4:9e:6e:e5:57:54:88:e3:d9:0b:90:
         e2:b0:93:2d:ef:46:c9:55:d4:ac:f2:d5:23:78:a9:4c:f1:de:
         9d:30:d3:4d:32:6f:75:2d:b1:e7:4f:50:d8:a2:db:81:bf:a6:
         7f:f2:e5:44:d0:c5:23:e1:52:1c:b0:01:48:76:8b:1e:b7:9b:
         9c:51:b6:29:ca:0e:2a:13:e9:97:7a:24:02:4b:7a:25:d1:b0:
         69:54:71:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAu+GnCGmGymNSZ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI0MDMxODIyMTYyMloXDTI0MDYxNjIyMTYyMlowLzEtMCsGA1UEAxMk
ZjRjODJhMWItN2Y3My00OTBjLWIwZTQtMGQwNjQyMjM5OGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1UJ+FA2x5e0jTbFGH7IsybJ/V9AJmShF7sK
SunvF6NXB5G3xoPnhUlQbASmsh/gazts68GKbWgAr71gj0LgxrMju92f6Q2K0lFf
BmtsYBgK9kmHFXZUpfdkFylgkeTbsqXLowxOFFRlVfTy4iZc4I+Dwy1q1ZAor6mf
mt4A+Y5VscVOK7gfehXSaa6p3E5moJEOG/l1Q9/L9xETJDtWyZIr3uyxnqFDk3py
Jl791wQpr/JgRFj8km5HRe/FB4Qy3l3jesRqBt2lvvydo8uy19ug9QfwM460MRL5
sHWTNpwJ+yj4y5fdd5cJK3aBMxpus1C4QK9bQtjHcYhAzIDHZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/B0PW3a65bAQTMlsqV61i1CoXhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODdhMmI4NGEtMjMxNC0z
YjI0LTlmNDgtNThlMGQzNWY4N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtmc/DyC5Hra7ZBFa393VdpBz5t8Wd4isGzDdsx0+7ivYPst3Fr+9hQ
NRYjoOpHYrsrPtoxgxEkuR4r8Xv4FMPIQ9rlaBAx5MNXbyZ8bDpT4puff7CJrqHP
76LEH+iGL+fRmjovyTRqvum2QtZ3ei9IPIVxpwb+EJyQtrAz7qTJYd1uQq+aVqLc
T1go5Bf9ZYWvIjwIsWtXJQyXdjBup0tiV7646BIveEu0nm7lV1SI49kLkOKwky3v
RslV1Kzy1SN4qUzx3p0w000yb3UtsedPUNii24G/pn/y5UTQxSPhUhywAUh2ix63
m5xRtinKDioT6Zd6JAJLeiXRsGlUcQ8=
-----END CERTIFICATE-----
Generated at Thu May 23 15:56:25 2024 by rpki-client on console-fra.rpki-client.org